Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/vpaVcBvY2LYg_w5I_lxs0SfFFbU.roa
File: vpaVcBvY2LYg_w5I_lxs0SfFFbU.roa (raw, json)
Hash identifier: zrYFGhk2ONf6DQnvAPvSGdED3yswxvcIpw3Kl3X91gA=
Subject key identifier: BE:96:95:70:1B:D8:D8:B6:20:FF:0E:48:FE:5C:6C:D1:27:C5:15:B5
Certificate issuer: /CN=73fdae1505049e446d5b0d144acc860d6c18167c
Certificate serial: 018CC348953FF97C13A573EF7341F8CCC8B2
Authority key identifier: 73:FD:AE:15:05:04:9E:44:6D:5B:0D:14:4A:CC:86:0D:6C:18:16:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/vpaVcBvY2LYg_w5I_lxs0SfFFbU.roa
Signing time: Mon 01 Jan 2024 04:29:23 +0000
ROA not before: Mon 01 Jan 2024 04:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201601
IP address blocks: 176.112.144.0/22 maxlen: 22
176.112.152.0/24 maxlen: 24
176.112.148.0/22 maxlen: 22
176.112.153.0/24 maxlen: 24
176.112.156.0/22 maxlen: 22
176.112.154.0/24 maxlen: 24
185.68.208.0/24 maxlen: 24
176.112.155.0/24 maxlen: 24
185.68.209.0/24 maxlen: 24
185.68.208.0/22 maxlen: 22
185.68.210.0/24 maxlen: 24
185.68.211.0/24 maxlen: 24
94.177.25.0/24 maxlen: 24
2a05:1cc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:95:3f:f9:7c:13:a5:73:ef:73:41:f8:cc:c8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73fdae1505049e446d5b0d144acc860d6c18167c
Validity
Not Before: Jan 1 04:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be9695701bd8d8b620ff0e48fe5c6cd127c515b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:54:2f:74:be:7b:69:35:10:e7:58:86:85:b5:
93:7b:76:84:cc:36:89:cb:bc:27:3a:35:81:8f:93:
76:b0:83:11:97:2b:ae:79:e5:df:a5:a7:6a:63:4f:
51:93:ea:16:38:8f:d2:e2:e4:f7:dc:5d:b7:8c:27:
fa:60:a2:ee:86:ee:59:73:3b:cc:a9:76:20:54:ca:
c5:3e:73:a6:e7:7f:d1:40:f3:b8:e0:fb:4e:72:7b:
74:42:e2:63:9f:9c:de:2d:27:2d:9e:3b:f9:c4:1d:
f2:9e:2a:cb:2f:14:8f:d1:f7:60:23:a7:f2:97:37:
23:2e:4b:74:a2:b3:76:91:aa:62:38:e8:fa:4f:7c:
d6:b7:b3:85:5e:3f:e4:1f:43:14:b0:d3:60:6d:cb:
9d:05:48:81:2e:b9:38:21:4d:c0:ab:a9:6f:14:5b:
ea:ac:31:0b:18:47:83:16:e8:f2:1c:83:3c:6d:15:
14:c3:7b:34:29:b2:c9:e7:71:2d:f8:a6:c7:43:86:
c7:ad:5f:32:a2:35:59:05:e4:a4:2c:9a:68:61:cf:
49:f9:8c:25:6d:dc:5b:87:a2:c4:0b:5a:09:67:9e:
b7:e7:a8:2f:d3:fd:e3:2f:00:dd:9f:af:95:e1:19:
b0:5c:5e:01:4b:5c:73:0f:b3:0c:33:a9:c1:31:4a:
4b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:96:95:70:1B:D8:D8:B6:20:FF:0E:48:FE:5C:6C:D1:27:C5:15:B5
X509v3 Authority Key Identifier:
keyid:73:FD:AE:15:05:04:9E:44:6D:5B:0D:14:4A:CC:86:0D:6C:18:16:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/vpaVcBvY2LYg_w5I_lxs0SfFFbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.25.0/24
176.112.144.0/20
185.68.208.0/22
IPv6:
2a05:1cc0::/29
Signature Algorithm: sha256WithRSAEncryption
26:6d:3a:51:f2:29:11:d0:3b:1d:75:9d:07:34:f1:44:a0:e7:
ec:17:4f:99:d0:70:fd:34:1a:12:08:50:35:36:33:25:49:0e:
0f:a5:2a:21:ab:d4:00:a0:9d:e5:33:26:2e:ad:85:b0:f1:2d:
6b:f7:fa:0d:b5:fa:31:5a:08:1a:ae:74:a9:34:42:99:fd:8d:
6d:2b:47:cd:f0:77:65:18:34:bd:77:06:7a:a5:dc:da:7e:13:
15:1a:b4:ab:b9:a5:a7:c6:e6:f0:53:29:e6:96:78:b2:fc:4a:
43:51:e6:a7:b4:78:80:3a:50:cc:76:0f:f9:51:61:72:fd:46:
fa:05:f3:1b:a9:ee:de:57:12:e5:b7:08:d5:91:43:07:4e:84:
9e:5b:b0:3f:53:3c:a1:ce:55:b7:72:b6:3d:33:4f:5f:eb:8a:
20:85:78:8d:e6:82:06:91:f6:c1:5e:15:b4:b7:77:98:0f:f6:
c3:08:c1:a0:ab:dd:4d:0d:2b:69:9a:5e:e0:14:4d:09:7c:95:
da:68:5b:42:94:99:e1:ec:b6:6a:3d:4e:3d:74:ab:ea:b0:96:
a7:52:04:8c:36:fe:8e:9b:b5:42:a1:39:5c:71:55:79:00:7c:
ac:c1:63:23:44:b6:e9:c4:39:bb:f5:19:36:b0:76:3b:27:f0:
c4:8f:88:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:17:14 2024 by rpki-client on console-ams.rpki-client.org